https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:28:49.199432+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-149712 EUVD-2026-149712 2026-10-03T20:28:49.279758+00:00 EUVD-2026-149712 https://cve.radiocsirt.org/vuln/fkie_cve-2004-0462 fkie_cve-2004-0462 2026-10-03T20:28:49.279795+00:00

The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server.

 https://cve.radiocsirt.org/vuln/ghsa-3vrg-5j8v-8v4x GHSA-3vrg-5j8v-8v4x 2026-10-03T20:28:49.279829+00:00

The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server.

 https://cve.radiocsirt.org/vuln/gsd-2004-0462 gsd-2004-0462 2026-10-03T20:28:49.279845+00:00 gsd-2004-0462 https://cve.radiocsirt.org/vuln/jvndb-2004-000588 jvndb-2004-000588 2026-10-03T20:28:49.279857+00:00

When using an SSL-VPN product, if a user selects a mode in which the user can log in with the username and password without using the SSL client authentication, a session hijacking could be conducted.